Implementation Objective
Provide trusted, timely incident updates to required stakeholders using approved channels and clear reporting criteria.
NIST CSF 2.0 Category
RS.CO Incident Response Reporting and Communication
RS Respond | Deliver accurate and timely internal/external incident communications.
Implementation Actions
- Define reportable events and channels.
- Use approved communication templates.
- Track notification approvals and timestamps.
Evidence Examples
- Notification procedures
- Communication templates
- Notification log
Suggested Metrics
- Notification timeliness
- Communication defect rate
Framework Crosswalk
Direct mappings for this CSF category into NIST SP 800-171 family sections and CIS Controls v8 implementation domains.